Matrikon Flex™ & eFlex™ SDKs

Trusted OPC UA toolkits for embedded and enterprise systems

Proven Foundations for OPC UA Connectivity

Operational data makes or breaks industrial products.

Real OT transparency starts at the source: the devices, controllers, and systems running operations — and demand secure, efficient, standards-based OPC UA communications.

Versatile OT Data Solutions, From Edge to Enterprise

The Problem: Fragmented Stacks

Home-grown OPC UA implementations and, one-off gateways, often lead to fragile integrations, security gaps, and rework, increasing costs, impact quality, and delay time-to-market.

Matrikon SDKs: One Architecture. Every Tier.

The Matrikon Flex and eFlex SDKs deliver a consistent, production-ready OPC UA foundation across devices and gateways — built on authentic, standards-based UA with enterprise-grade security

Matrikon Flex: Build Faster at Scale

A full-featured OPC UA client/server stack, production-ready at scale, with a clean, unified API and modular architecture.

Matrikon Flex implements OPC UA Data Access, History Access, and Alarms & Conditions, so you can read/write live values, browse a modeled address space, subscribe to changes and events, and query or append history without bolt-ons. One consistent UA surface from first tag to enterprise dashboard removes the need for parallel APIs, custom adapters, or retraining.

Stream OT data to modern stacks (plant to cloud) without code. Flex supports OPC UA Pub/Sub over MQTT/TCP and HTTPS, giving you standard paths into historians, data lakes, and analytics platforms. Use MQTT topics to publish/stream telemetry and state to IT services, and HTTPS for secure, firewall-friendly request/response exchanges.

With validated hooks for WolfMQTT + WolfSSL, you can stand up TLS-secured MQTT quickly without workarounds or vendor-locked SDKs.

Flex integrates certificate-based authentication, configurable security policies (ECC/RSA), and TLS integrations (e.g., OpenSSL, webTLS, WolfSSL), so identity and encryption are baked-in, not an afterthought. You can manage trust lists, certificate enrollment/rotation, and revocation centrally and enforce policies per site or system. Look forward to more predictable audit outcomes, faster approvals, and a repeatable security posture across fleets.

Built for 24/7 systems and real-world load, Matrikon Flex’s multi-threaded, multi-client runtime sustains heavy subscription loads, frequent reads/writes, and event traffic while keeping latency low. Concurrency controls and efficient queueing help maintain throughput under redundancy patterns. As CPU cores increase, the architecture targets near-linear gains, so the same stack grows with your workload instead of becoming a bottleneck.

Flex’s modular C++ design runs on Windows, Linux, and select RTOS, with clean APIs/callbacks that integrate into gateway and control environments, so you can deploy across common OSs and targets without re-architecting. Matrikon Flex is designed to accommodate your organization’s preferred crypto/XML libraries and IT tooling rather than forcing a single vendor stack.

Rich UA, End to End

Cloud & Enterprise Messaging

Audit-Ready Security

Performance at Scale

Portable Where You Need It

Matrikon Flex implements OPC UA Data Access, History Access, and Alarms & Conditions, so you can read/write live values, browse a modeled address space, subscribe to changes and events, and query or append history without bolt-ons. One consistent UA surface from first tag to enterprise dashboard removes the need for parallel APIs, custom adapters, or retraining.

Stream OT data to modern stacks (plant to cloud) without code. Flex supports OPC UA Pub/Sub over MQTT/TCP and HTTPS, giving you standard paths into historians, data lakes, and analytics platforms. Use MQTT topics to publish/stream telemetry and state to IT services, and HTTPS for secure, firewall-friendly request/response exchanges.

With validated hooks for WolfMQTT + WolfSSL, you can stand up TLS-secured MQTT quickly without workarounds or vendor-locked SDKs.

Flex integrates certificate-based authentication, configurable security policies (ECC/RSA), and TLS integrations (e.g., OpenSSL, webTLS, WolfSSL), so identity and encryption are baked-in, not an afterthought. You can manage trust lists, certificate enrollment/rotation, and revocation centrally and enforce policies per site or system. Look forward to more predictable audit outcomes, faster approvals, and a repeatable security posture across fleets.

Built for 24/7 systems and real-world load, Matrikon Flex’s multi-threaded, multi-client runtime sustains heavy subscription loads, frequent reads/writes, and event traffic while keeping latency low. Concurrency controls and efficient queueing help maintain throughput under redundancy patterns. As CPU cores increase, the architecture targets near-linear gains, so the same stack grows with your workload instead of becoming a bottleneck.

Flex’s modular C++ design runs on Windows, Linux, and select RTOS, with clean APIs/callbacks that integrate into gateway and control environments, so you can deploy across common OSs and targets without re-architecting. Matrikon Flex is designed to accommodate your organization’s preferred crypto/XML libraries and IT tooling rather than forcing a single vendor stack.

Ship Faster, Prove More, Run Longer

Ideal for PLCs, controllers, gateways, and industrial software, Matrikon Flex replaces custom plumbing with a single stack that delivers real results:

Audit-ready Security

Enterprise PKI/TLS and policy controls

Confident Scale-up

Edge to multi-site on standard with MQTT/HTTPS

Lower Total Cost

Reusable integrations across vendors/sites

Plant-to-cloud Continuity

One stack from on-prem to enterprise services.

Matrikon eFlex: Do More With Less

Ultra-compact OPC UA connectivity for embedded, RTOS, and bare-metal devices, made for sensors, controllers, and compact gateways, where every byte of RAM counts.

Matrikon eFlex brings professional OPC UA to tiny devices without a heavyweight stack. Implementing OPC UA Data Access with a modeled address space browse/read/write, methods, and subscriptions/monitored items, eFlex delivers all the essentials. You get a clean, vendor-neutral data model that your ecosystem already understands, so small devices interoperate out of the box with gateways, SCADA, historians, and analytics.

Matrikon eFlex implements OPC UA Pub/Sub using UADP over UDP. The sessionless design reduces CPU overhead, while multicast allows a single publisher to distribute updates to many subscribers on the same network segment — delivering fast, predictable messaging with minimal overhead. This approach also positions devices for OPC UA FX / TSN timing integration through the BE. eTSN stack, which extends eFlex with deterministic scheduling and static TSN configuration — minimizing future redevelopment.

Matrikon eFlex supports certificate-based authentication, RSA, and Eliptical Curve Cryptography (ECC) (e.g., P-256) policy choices (such as Basic256Sha256), and provides interfaces for OpenSSL/WolfSSL with hooks to bring your own crypto if your platform requires it. You get certificate stores, provisioning/validation options, and policy control that match embedded realities, instead of forcing desktop-style security footprints.

Matrikon eFlex runs predictably on small controllers and real-time OS devices. It uses a simple, single-threaded loop (with an optional async mode) that keeps response times steady even when data traffic spikes. With typical “micro” builds using ~150+ KB of RAM, you can add secure OPC UA without reworking your memory layout or slowing your control cycle.

Matrikon eFlex uses a portable C++ core which can also be used in C-centric projects. With reference ports and examples for Embedded Linux, FreeRTOS ThreadX, and Windows, plus straightforward callbacks for time, memory, networking, and localization, eFlex helps reduce low level protocol coding so your software engineers can focus on product features — not stack work.

Matrikon eFlex is validated against OPC UA 1.04 (Micro Embedded + Data Access facets) and will be validated against OPC UA 1.05 in 2026, so behavior in your products is predictable in the certification and in actual deployments of your solutions. Matrikon eFlex is exercised against conformance profiles with real-world node sets, subscription patterns, and security policies. That means fewer surprises during formal reviews, smoother interoperability with other UA components, and a cleaner path as you evolve toward UA FX/TSN.

Matrikon products are developed under the IEC 62443-4-1 certified Secure Development Lifecycle of Honeywell Connected Enterprise.

For OEMs, this means your applications are built on an independently verified foundation for cybersecurity best practices, from design through maintenance. You gain inherited security assurance, faster compliance with IEC 62443-4-2 or system-level audits, and the confidence that every release of the SDK follows audited, secure-by-design processes.

Build once — with certified trust already built in

Embedded UA

Lean, Deterministic Pub/Sub

Edge-Grade Security

Deterministic Runtime

Developer-Friendly

Trusted Standards

IEC62443-4-1 Certified Secure Lifecycle

Matrikon eFlex brings professional OPC UA to tiny devices without a heavyweight stack. Implementing OPC UA Data Access with a modeled address space browse/read/write, methods, and subscriptions/monitored items, eFlex delivers all the essentials. You get a clean, vendor-neutral data model that your ecosystem already understands, so small devices interoperate out of the box with gateways, SCADA, historians, and analytics.

Matrikon eFlex implements OPC UA Pub/Sub using UADP over UDP. The sessionless design reduces CPU overhead, while multicast allows a single publisher to distribute updates to many subscribers on the same network segment — delivering fast, predictable messaging with minimal overhead. This approach also positions devices for OPC UA FX / TSN timing integration through the BE. eTSN stack, which extends eFlex with deterministic scheduling and static TSN configuration — minimizing future redevelopment.

Matrikon eFlex supports certificate-based authentication, RSA, and Eliptical Curve Cryptography (ECC) (e.g., P-256) policy choices (such as Basic256Sha256), and provides interfaces for OpenSSL/WolfSSL with hooks to bring your own crypto if your platform requires it. You get certificate stores, provisioning/validation options, and policy control that match embedded realities, instead of forcing desktop-style security footprints.

Matrikon eFlex runs predictably on small controllers and real-time OS devices. It uses a simple, single-threaded loop (with an optional async mode) that keeps response times steady even when data traffic spikes. With typical “micro” builds using ~150+ KB of RAM, you can add secure OPC UA without reworking your memory layout or slowing your control cycle.

Matrikon eFlex uses a portable C++ core which can also be used in C-centric projects. With reference ports and examples for Embedded Linux, FreeRTOS ThreadX, and Windows, plus straightforward callbacks for time, memory, networking, and localization, eFlex helps reduce low level protocol coding so your software engineers can focus on product features — not stack work.

Matrikon eFlex is validated against OPC UA 1.04 (Micro Embedded + Data Access facets) and will be validated against OPC UA 1.05 in 2026, so behavior in your products is predictable in the certification and in actual deployments of your solutions. Matrikon eFlex is exercised against conformance profiles with real-world node sets, subscription patterns, and security policies. That means fewer surprises during formal reviews, smoother interoperability with other UA components, and a cleaner path as you evolve toward UA FX/TSN.

Matrikon products are developed under the IEC 62443-4-1 certified Secure Development Lifecycle of Honeywell Connected Enterprise.

For OEMs, this means your applications are built on an independently verified foundation for cybersecurity best practices, from design through maintenance. You gain inherited security assurance, faster compliance with IEC 62443-4-2 or system-level audits, and the confidence that every release of the SDK follows audited, secure-by-design processes.

Build once — with certified trust already built in

Small Footprint. Big Impact.

Best for RTOS and bare-metal targets like sensors, controllers, and compact gateways, eFlex gives tiny devices a trusted OPC UA voice.

Unified Scale

Sensors to platforms, one OPC UA approach.

Less Risk

Conformance-tested, field-proven core.

Future-Ready

Pub/Sub and TSN today, UA FX tomorrow.

Edge-Fit

Tiny footprint and deterministic runtime.

See the Specs, Plan the Build

Explore features, memory targets, OS support, and integration examples for Matrikon Flex and eFlex.